Payment Card Industry Security Standards Council

The Payment Card Industry Security Standards Council (PCI SSC) was formed by American Express, Discover Financial Services, JCB International, MasterCard and Visa Inc. on 7 September 2006,^[1] with the goal of managing the ongoing evolution of the Payment Card Industry Data Security Standard.

PCI Security Standards Council, LLC

Founded	7 September 2006; 18 years ago (2006-09-07)
Headquarters	401 Edgewater Place Suit 600, Wakefield, Massachusetts , US
Website	pcisecuritystandards.org

The Payment Card Industry Data Security Standard (PCI DSS) consists of twelve significant requirements including multiple sub-requirements, which contain numerous directives against which businesses may measure their own payment card security policies, procedures and guidelines.^[2][3][4][5]

To address rising cybersecurity risks to the payment ecosystem, the PCI SSC currently manages 15 standards for payment security, which are variously applicable to payment card issuers, merchants and service providers, vendors and solution providers, and acquirers and processors.^[6] More recently, the PCI SSC has collaborated with EMVCo, to provide the security requirements, testing procedures and assessor training to support the EMV 3-D Secure v2.0 standard.^[7]

Membership and participation

Members of the PCI Security Standards Council include an executive committee of six major payment brands: American Express, Discover Financial Services, JCB International, MasterCard, Visa Inc., and UnionPay.^[8] The executives and management of the PCI SSC are supported by 30 companies comprising the Board of Advisors,^[8] and other stakeholder advisory groups such as assessor companies and regional boards.

Interested parties can participate in the development of the PCI security standards through member registration as a Participating Organization.^[9][10] Currently, there are more than 700 Participating Organizations from more than 60 countries.^[9] These participants are organized into Special Interest Groups,^[11] which are tasked with recommending revisions to and the further development of the various security standards maintained by the PCI SSC.